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Abstract 

We prove that, to compute a Boolean function / : {0, 1}^ — * { — 1, 1} with error probabil- 
ity e, any quantum black-box algorithm has to query at least 1 ~ 2y ^ pfN = X ~\ Sf times, 
where pf is the average influence of variables in /, and Sf is the average sensitivity. It's 
interesting to contrast this result with the known lower bound of f2(y^Sf ), where Sf is the 
sensitivity of /. This lower bound is tight for some functions. We also show for any poly- 
nomial / that approximates / with error probability e, deg(f) > \{1 — j^;) 2 PfN. This 
bound can be better than previous known lower bound of il(WBSf) for some functions. 
Our technique may be of intest itself: we apply Fourier analysis to functions mapping 
{0, 1}^ to unit vectors in a Hilbert space. From this viewpoint, the state of the quantum 
computer at step t can be written as X) S 6{o i} N \s\<t -0 s x ■> which is handy for lower 
bound analysis. 



1 Introduction 

To compute a Boolean function / : {0,1}^ — > {—1,1} in the black-box model, the only 
way the computer can access the input is to ask an oracle questions like: what is Xj. The 
complexity measurement is the number of times the computer asks. For example, to compute 
/(xo,^i, • • • ,xtv_i) = xq V x\ V . . . V xtv-i, any classical computer needs to query Q(N) 
times, while surprisingly, there exists a quantum algorithm that queries only 0{^/N) times 

'This work was supported in part by DARPA and NSF under grant number 9627819, and was done when 
the author was visiting University of California at Berkeley. 
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The speedup of quantum computers can even be exponential if promise problems are 



considered | DJ92| , Si94j| . We study quantum lower bounds for error-bounded computation of 
total Boolean functions only. 

Grover's algorithm was shown to be optimal by | BBHT9C , Za97 |, and tight bounds 
for all symmetric Boolean functions, in particular for some familiar ones like PARITY , 



MAJORITY , are shown in | BBCMW98; 1 by polynomial method. The latter relates two 
characterizations of Boolean function complexity, the lowest degree of approximation polyno- 
mials and the block sensitivity, to lower bounds of quantum black-box complexity. A Boolean 
function / on N Boolean variables can be uniquely represented as a multi-linear real polyno- 
mial that takes f(x) for x G {0, 1}^. Let / be a real polynomial that approximates / and has 
the least degree. The block sensitivity of /, BSf, is the maximum (over all possible inputs) 
number of non-intersecting blocks of variables in an input such that flipping all variables in 
one block flips the function value. 



Theorem 1.1 \BBCMW98 j To compute a Boolean function f[xQ, x\, . . . , xjv— l) 
probability e,, any quantum computer needs to query at least ^deg(f) times. 



with error 



Theorem 1.2 \BBCMW9t / To compute a Boolean function f on N variables with error 



probability |, any quantum computer needs to ask at least \^JBSf times. 

In the latter theorem, replace BSf by the sensibility Sf, we get the best known lower 
bound by of sensitivity. Sf is just the maximum (over all possible inputs) number of bits such 
that flipping each flips the function value. 

Just like the lowest approximating degree, block sensitivity, and sensitivity, the influence 
of variables (Infi(f)) and average sensitivity (Sf), introduced by | ]KKL88 |, are yet other 



important characterizations of Boolean function complexity. One can show that J2i^ n i(f) 
Sf. Our main result provides the first known quantum black-box complexity lower bound by 
influence of variables ( or equivalently, by average sensitivity): 



Theorem 1.3 To compute a Boolean function f : {0, 1}^ — ► {—1, 1} with error probability 
e, any quantum algorithm needs to query at least l ~ 2 ^ PfN = — |^ fff times, where pf is 
the average influence of variables of f. 

Actually we prove a stronger results: 

Theorem 1.4 To compute Boolean function f : {0, 1}^ — > {—1, 1} with error probability e, 



any quantum algorithm needs to query at least \ ■ 
times, for any positive odd integer k, and f s = E x 



f(x)(-ir° . 



■N 
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The lowest degree of approximation polynomials for symmetric functions has a tight char- 



acterization | Pa92 |. However, for asymmetric functions, the best general lower bound known 
is: 



Theorem 1.5 \NS9i ] For any Boolean function f and its approximation f , deg(f) > JBSf/G 



Our lower bound by influence can be better than this bound for some functions: 
Theorem 1.6 For any polynomial f that approximates f with error probability e, deg(f) > 



id 



3e \2 



pjN. 



Note that, Theorem 1.6 and Theorem 1.1 together imply a lower bound of quantum black- 



box complexity that is asymptotically the same as in Theorem |1.3| . However, the former gives 
a better constant. 

Now we turn to our proof ideas. 

For any oracle x, let c/>(x) be the state of the quantum computer after T times of queries. 
If f(x) 7^ f{y), then, in order to distinguish x and y, \\(f>(x) — (p(y)\\ 2 must be large, meaning, 
lower bounded by 2 — 4y/e. If we pick x uniformly random from {0, 1}^, and pick a random 
bit Xi, then flip xi to get y, then we make a hard time for the quantum algorithm: on one 



hand, E = E, 



is large (meaning, lower bounded by (2 — 4^/e)pf), on the 

other hand, this expected value is upper-bounded by which then gives us Theorem 1.3 . 

Here is how we get the upper bound of E by 4^. The key observation of |BBCMW98] is 
that with oracle x, after T queries, the state of the quantum computer can be expressed as: 

<M X ) = ^ZPc{x)\c), 



where {c} is a set of orthonormal basis, and p c 's are polynomials over Xj's of degree at most 
T. Since p c 's can be represented in Fourier basis {L s }, where L s (x) = (— l) s ' x , we have: 



se{0,l} N ,\s\<T 



1) 



where 4> s are constant vectors depending on s only. The number of queries comes in in the 
maximum possible weight of s with <p s ^ 0, since \s\ is the degree of polynomial (— l) x ' s . 
This representation of <p is implicit in [ FGGS9S[ |, and has a natural interpretation that will be 
described later. We can now write down E explicitly in terms of (f> s , and then get the desired 
upper bound by 

For the lower bound of deg(f) by average sensitivity, we use the same idea. We pick the 
same random pair (x,y), and examine the expected value of — f(y)\\ 2 and bound this 
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expectation from both sides - the upper-bound side by deg(f), and the lower-bound side by 
Sf- 

Section |2| reviews standard notions and facts about Fourier transform and influence of 
variables. Section [3| looks at quantum black-box computation from the viewpoint of Fourier 
transform, and section |] provides the proofs, which is followed by open problems. 

Some miscellaneous notations: for any string s G {0,1}^, \s\ equals to the number of 
l's in s, and X s = \s\/N, e,- L G {0, 1}^ is the string with the only 1 in the z'th position, for 
< i < N — 1. All probability distributions are uniformly random over the corresponding 
domain. + usually is bitwise XOR, and • is usually inner product. 

2 Fourier transform of Boolean functions and influence of vari- 
ables 

For any s G {0, 1}^, let L s : {0, 1}^ -» {-1, 1} be L s (x) = (-l) 8 ^ for any x G {0, 1}* {L s } 
form a basis for all functions mapping {0, 1}^ to C. 

Lemma 2.1 (Well known) Any f : {0, 1}^ — ► C can be uniquely represented as: f = J2 S fsL s , 
where f s = E x [f(x)L s (x)), and max g j s ^ {\s\} = deg(f), and J2s hft = E s[f(s)f*(s)}. 



Definition 2.2 \KKL8t J The influence of variable xi on Boolean function f(xo,x\, ... ,xn-i) 
is given by: Infi(f) = Pr x f(x) ^ f(x + e^) , the average influence (of variables) is 

p f = EJlnfiif)]. 



Lemma 2.3 \CG88 , KKL8t] For any Boolean function f on N variables, if f = ^Z s f s L s , 
then p f = £ S / S 2 A S . 



Definition 2.4 The sensitivity of f on input x is given by Sf(x) 
and the average sensitivity is Sf = E x St{x) . 

It's easy to check: 
Lemma 2.5 Sf = pfN. 



\{i:f(x)^f(x + ei)}\, 
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3 Quantum black-box algorithm from a viewpoint of Fourier 
transform 



To compute a Boolean function f on N variables, a quantum computer uses four sets of 
registers \i) i\a) A\w)w\f) R'- I (index) has \gN bits, A (answer) and -R(result) are of one bit 
each, and W (working) of a fixed number of bits. The quantum computer is working in the 
Hilbert space spanned by the base vectors {|z)/|a) J 4|w;)vF|r)^}.An algorithm <j> that computes 
/ in T queries with error probability at most e can be represented as a sequence of 2T + 1 
unitary operators on the H: 

4> : U -> O -» Ui -> O -» . . . -> O -> U T , 

where U%8 are arbitrary unitary transformations defined by the algorithm, and O's are the 
query gates: 

O : \i) i\r) a\w)wV) r -> \i)i\r + Xi) A \w) w \r) r. 

The quantum computer starts from the constant vector \0)ia\VR, a Pply the sequence of unitary 
transformations, and then observing the R register yields f(x) with error probability smaller 
than e. 

Essentially, <fi defines a function {0, 1} N — > {v € H, \\v\\ 2 = 1}. A key observation in 
[ BBCMW98I1 is, 

Lemma 3.1 t BBCMW98J On oracle x, the final state of the quantum computer can be written 



as: 



where c is taking over all possible configurations of all the registers, and p c (x) is a polynomial 
mapping {0, 1}^ to C with deg(p c ) < T. 

Therefore, we can think of <f> as a polynomial with coefficients in H. Then, any quantum 
black-box algorithm defines such a polynomial of degree at most T. Now we introduce the 
Fourier transform viewpoint of quantum black-box algorithms. 

Lemma 3.2 Let 4> be defined by a quantum black-box algorithm, then <p can be represented 
as 

<t> = <i>s L s, 

s,\s\<T 



where </>, = E. 



4>(x)L s (x) , andY,s{4>s\(i>s) = 1 - 
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Here is a natural interpretation of <p s . Let's shift the basis for H from {|c)} to that 
spanned by eigenvectors of the oracle gates. Denote F\j)a by \Cj)a, where F is the Hadamard 
transform on Z™. The following lemma is easy to check. 

Lemma 3.3 For a general oracle gate considered in literature, namely, the oracle x is re- 
garded as a function {0, l} n — > {0, l} m , and the oracle gate behaves in this way: 

O x \i)i\j)A = \i)i\j + x(i))a, 

Then 

O^Cj)H\r) = (-ir%)\C j )\w)\r), 

where e*- G {0, l} 2 ™" 1 and has j in the ith block, and in other blocks (each block's length is 
m). 

Now let's see what's going on in a quantum black-box computation, following directions 
of {|z)|Cj)} : We start from the constant vector |0), make a unitary transformation Uq, then 
we project into the subspace spanned by some |ii)|Cji)j then we make a query, resulting a 

sign-flip (—1) Jl , then we continue our walk in the same manner: make the second unitary 
transformation Ui, then go into subspace of some ^2) | £72)1 as ^ the oracle to flip our sign by 

(— l) x ' £j 2, and so on. One good thing about this walk is that every time we project to a 
subspace or make a query, for different oracle, the only difference is the sign, and this sign is 
given by 

M<i; +«£-■■■ + <$;)• 

if we've gone through the path 

p = 1*2)102) — ► l**>IO*>- 

We use a p to denote the vector reached by path p with oracle 0, and ir p = e 1 ^ +ef 2 ~\ 1- e** , 

then it's easy to check: 

Lemma 3.4 <f> s = T. P ,n v =s <*v 

4 Main result 

4.1 Lower bound of quantum black-box complexity 

We're given a Boolean function / : {0,1}^ — > { — 1,1}, which can be represented as / = 
S s e{o,i} jV fsF s - Let 4> : {0, 1}^ —>■ H be defined by a quantum black-box algorithm that uses 



6 



T queries to compute / with error probability bounded by e, and for any input x 6 {0, 1}^, 

<P{x) = Y, a: \a\<T(f>aLa(x). 

Now we take x uniformly random from {0,1}^, and take i\, 12, ■ ■ ■ , ik uniformly and 
independently random from {0, 1, ■ ■ ■ , N — 1}, for positive odd integer k. Let i = + ej 2 + 
■ ■ ■ + d k . We would like to bound 



E — E ■ ■ 



(x) - 4>(x + T) 



from both side - the lower bound is in in terms of the average sensitivity, and the upper 
bound by T, and then get the lower bound for T. 

To bound E from below, first note that when a pair of input x, y G {0, 1}^ have different 
function value, the corresponding vector <j>(x) and cf>(y) are far apart: 

Fact 1 Iff(x)^f(y), \\cf>(x) - <P(y)\\ 2 > 2 - A^l. 

Therefore the fraction such that f{x) ^ f(x + i) bounds E from below. The fraction is 
given by the following lemma: 

Lemma 4.1 /V.,„. [/(*) ^f{x + i)} = \-\ /*(! - 2A s ) fc . 
Proof. 

Pr x , il , i2 ,.., ik [f(x)^f(x + i)} (1) 
= l -E[l-f(x)f{x + i)] (2) 

= J-JE f s Js 2 E[L s ,{x)L S2 {x + i)\ (3) 

S1,S2 

= \-\Y, LLe[{-it {si+S2)+1s2 ] (4) 

S1,S2 

5-^E/ S 2 K { o,...,iv-i } [(-l) e< -l) fe (5) 



2 2 
1 
2 



; i£/ s 2 (l-2A^ (6) 



When k = 1, this probability is exactly the average sensitivity. 
Putting the fact and the lemma together we have: 
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Lemma 4.2 E > (2 - 4^i)(± - \ £ s / s 2 (l - 2A s ) fc ) 

Now let's bound E from above, and we'll see how powerful the Fourier representation of 
(f> is. 

Lemma 4.3 E < 2 - 2(1 - X T ) k . 
Proof. ( \a\ < T.) 

E = E 



E 



|| J2 L a (x)[l-L a (i)]ct> a \\ 

' a,\a\<T 

J2L a+b (x)[l - L a (T)][l - L b (i)](4> a \ 



a 

^2w a \\4> a \\ 2 



(1 " A,®)* 



(7) 

(8) 

(9) 
(10) 



Where U7 a = E il)i2) ^^i k [(l — L a (i)) 2 ]. Now let's bound w a by Ay, and we think of a £ 
{— 1, 1}^, with the standard interpretation of —1 as 1 in the original a, and 1 as 0. 



UK, 



4Pr[aj 1 • aj 2 • • • a 



AE 



1 - a h ■ a,i. 



= 2-2(E i [a i ]) k 
= 2-2(l-2A a )' 
< 2-2(l-2A T ) 



(11) 
(12) 

(13) 
(14) 
(15) 



Note that J2 a II &a 1 1 2 = 1) therefore, 



S < 2-2(1- 2A r ) fc . 



Now put the above two lemmas together, solve the inequality, then we get Theorem 1.4 



Theorem L3 is obtained by Theorem L4 and Lemma |2^ 

At the time of writing, we don't know if we can make use of the theorem for k > 1. But 
for k = 1, any lower bound for sum of influence implies lower bound for quantum black-box 
complexity. Here are two examples: 

When / is a random function, Pf = \-, therefore we have: 
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Corollary 4.4 To compute a random function f with error probability e, the expected number 



of queries of any quantum computer is at least 



N. 



This matches [Da98] up to a constant factor, though slightly worse than the lower bound 



of Am98 1 . Since the PARITY function has average sensitivity 1, we have 



Corollary 4.5 To compute PARITY with error probability e, any quantum computer needs 



to query at least 



N times. 



This is also a known result [|BBCMW98|| , flFGGS98 l 



4.2 Degree lower bound of approximating polynomials 



Definition 4.6 fggg|/ let f : {0, 1}^ {0, 1} be a Boolean function, we say f : {0, 1}^ 

R approximates f with error probability e if for any x £ {0, 1} , \ f{x) — f(x)\ < e. 

Let / = J2 S fs-Ls, and d = deg(f). Define 



E — E T , 



|/(x)-/(x + e,)P 



Putting the following two lemmas together we get Theorem 1.6 
Lemma 4.7 E' > (1 - 2e) 2 p f . 

Proof. E' > Pr[f{x) / f(x + ei)](l - 2e) 2 = (1 - 2e) 2 p f .m 

Lemma 4.8 E' < 4(1 + e) 2 ^. 

Proof. 



E' = E 



j2f s (i-(-iy e *)L s (t 



L 



S1+S2 



[x) 



E; 



(l-(-l) Sl - e ')(l-(-l) S2 ' ei ) 



S1,S2 



~J2 



(i-(-iy^) 2 



x2 



(16) 
(17) 

(18) 
(19) 



9 



< 4(1 + e) 2 ^. (21) 



Since most functions have large average influence, our lower bound by influence (Theorem 



1.1) is better than the bound by block sensitivity (Theorem |1.5| ) for most functions. An ex- 
treme example is PARITY . Here is an example of asymmetric function: Let /(xq, x\ , X2,x%) = 
xo(x\ — X2) 2 + (1 — xq){x2 — X3) 2 , and is obtained by iterate / k times: fk(Xo, X%, X 2 , A3) = 
f(fk-l(X ), fk-i(Xx), fk-i(X 2 ), fk-i(X 3 )), where X,- t is the ith block of A k ~ l input variables. 
Then one can show that BSf k = 3 fc , Sf, = 2.5 k > ^BSf k . It is conceivable that our lower 
bound is beneficial in proving degree lower bounds of asymmetric functions when the bound 
by block sensitivity is not good. (Although, in our example, Sf k is not a tight bound for / 
either: one can show that deg(f) > 3 fc .) 



5 Open problems 



So far the lower bound of quantum black-box complexity by the degree of approximation 
polynomials implies any other (asymptotic) lower bounds. Is it asymptotically optimal for all 
Boolean functions? 

For polynomials that approximates symmetric Boolean functions, [Pa92] gives a tight 
characterization on the lowest degree. However, we do not know much about the case of 
asymmetric functions. Is there any general tight bound for the lowest degree of approximation 
polynomials? 

The relations of block sensitivity and sensitivity and their average cases have been long- 
standing open problems [NS92, Ru95| , Be96 , Ve95] . Is there any lower bound of quantum 
black-box complexity and lower degree of approximation polynomials by average block sensi- 
tivity? 
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